注册 登录  
 加关注
   显示下一条  |  关闭
温馨提示!由于新浪微博认证机制调整,您的新浪微博帐号绑定已过期,请重新绑定!立即重新绑定新浪微博》  |  关闭

忘忧草的博客

品味人生--精通IT管理和技术

 
 
 

日志

 
 
 
 

几种不同方式将用户照片导入到AD  

2012-08-14 14:13:57|  分类: Moss2010 |  标签: |举报 |字号 订阅

  下载LOFTER 我的照片书  |

修改 AD架构为了使头像能够显示在GAL中,需要让其在全局编录(GC)中进行复制 ,

默认情况下,对象 的“thumbnailphoto”属性 值不会在GC中进行复制 ,通过修改 AD架构可以是实现 这一个功能。

1. 在以管理 员身份打开cmd,并执行 Regsvr32 schmmgmt.dll注册AD架构管理单元,如下图所示:

clip_image002

2. 打开MMC控制 台,添加AD架构管理 单元

clip_image004

3. 在活动 目录 架构管理 单元中展开“属性 ”节点,定位到“thumbnailPhoto”。

4. 打开“thumbnailPhoto”的属性 对话框,在“常规”选项 卡上勾选“将此属性 复制 到全局编录”。

clip_image006

?

修改完毕后保存。以下几种方式进行修改。

提示:

我们要实现准备好一些照片,照片不要超过大小不要超过30KB,所以尺寸也要控制好,一般就96X96就差不多了,太大了没有意义,因为这些照片是存在AD内的,所以如果太大的话,会导致AD的数据库增大,从而影响复制

?

1、powershell脚本修改

脚本1:

$SAMName=Read-Host "Enter a username"
?
      $root = [ADSI]'GC://dc=uc,dc=local'
      $searcher = new-object System.DirectoryServices.DirectorySearcher($root)
$searcher.filter = "(&(objectClass=user)(sAMAccountName=$SAMName))"
$user = $searcher.findall()
$userdn = $user[0].path
$userdn = $userdn.trim("GC")
$userdn = "LDAP" + $userdn
?
function Select-FileDialog
{
    param([string]$Title,[string]$Directory,[string]$Filter="All Files (*.*)|*.*")
    [System.Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms") | Out-Null
    $objForm = New-Object System.Windows.Forms.OpenFileDialog
    $objForm.InitialDirectory = $Directory
    $objForm.Filter = $Filter
    $objForm.Title = $Title
    $objForm.ShowHelp = $true
    $Show = $objForm.ShowDialog()
    If ($Show -eq "OK")
    {
        Return $objForm.FileName
    }
    Else
    {
        Write-Error "Operation cancelled by user."
    }
}
?
$photo = Select-FileDialog -Title "Select a photo" -Directory "%userprofile%" -Filter "JPG Images (*.jpg)|*.jpg"
?
$user = [ADSI]($userdn)
[byte[]]$file = Get-Content $photo -Encoding Byte
?
# clear previous image if exist 
$user.Properties["thumbnailPhoto"].Clear()
?
# write the image to the user's thumbnailPhoto attribute by converting the byte[] to Base64String 
$user.Properties["thumbnailPhoto"].Add([System.Convert]::ToBase64String($file))
?
# commit the changes to AD 
$user.CommitChanges()
?
?

脚本2:

#Add-ADPhoto   Powershell v1 compatibile script for updating
#user thumbnailphoto attribute.  Resizes input photo to recommended
#dimensions and size.  Only updates for the currently logged in user.
#This is a script for user self service.
 
#Author: Nathan Linley
#Site: http://myitpath.blogspot.com
 
$infile = $args[0]
$aspect = $args[1]
 
function usage {
        write-host "Usage: Add-ADPhoto filename [aspect]"
        write-host "   Provide the name of an image file in your current directory."
        write-host "   If you wish to preserve the aspect ratio of the image, type"
        write-host "   1 after your file name.  Images are resized to the recommended"
        write-host "   96x96, converted to JPG and set to 70% quality to limit size."
        exit 
 
}
$imagefile = (pwd).path + "\" + $infile
$imagefileout = (pwd).path + "\adout.jpg"
 
##############################################################################
#Check to see if the argument for filename was provided, and that it exists###
##############################################################################
if ([string]::isnullorempty($infile) -or -not (test-path $imagefile)) {
        &usage
}
 
 
###############################
#Remove any old converted file#
###############################
if (test-path $imagefileout) {
        del -path $imagefileout -ErrorAction "silentlycontinue"
}
 
$Image = New-Object -ComObject Wia.ImageFile
$ImageProcessor = New-Object -ComObject Wia.ImageProcess
 
 
##########################################################
#Try loading the file, if its not an image this will fail#
##########################################################
$Image.LoadFile($ImageFile)
 
if (-not $?) { &usage }
 
 
#############################################################
#Create filters, set aspect ratio setting, change dimensions#
#to max 96pixels, convert to JPG and set quality            #
#############################################################
$Scale = $ImageProcessor.FilterInfos.Item("Scale").FilterId
$ImageProcessor.Filters.Add($Scale)
$Qual = $ImageProcessor.FilterInfos.Item("Convert").FilterID
$ImageProcessor.Filters.Add($qual)
 
if ([string]::isnullorempty($aspect) -or [string]$aspect -ne "1") {
        $ImageProcessor.Filters.Item(1).Properties.Item("PreserveAspectRatio") = $false
} else {
        $ImageProcessor.Filters.Item(1).Properties.Item("PreserveAspectRatio") = $true
}
 
$ImageProcessor.Filters.Item(1).Properties.Item("MaximumHeight") = 96
$ImageProcessor.Filters.Item(1).Properties.Item("MaximumWidth") = 96
$ImageProcessor.Filters.Item(2).Properties.Item("FormatID") = "{B96B3CAE-0728-11D3-9D7B-0000F81EF32E}"
 
####################################################################
#Drop image quality until it meets the size recommendation of 10kb #
####################################################################
$quality = 80
do {
        Remove-Item -path $imagefileout -ErrorAction "silentlycontinue"
        $ImageProcessor.Filters.Item(2).Properties.Item("Quality") = $quality
        $Image = $ImageProcessor.Apply($Image)
        $Image.SaveFile($ImageFileOut)
        [byte[]]$imagedata = get-content $imagefileout -encoding byte
        $quality -= 10
} while ($imagedata.length -gt 10kb)
 
 
#####################################################################
#Find domain, and Account distinguished name.  Open user object, add#
#thumbnailphoto data and save.
#####################################################################
$de = new-object directoryservices.directoryentry("LDAP://" + $env:logonserver.substring(2))
$ds = new-object directoryservices.directorysearcher($de)
$ds.filter = "(&(objectclass=user)(samaccountname=" + $env:username + "))"
$myaccount = $ds.findone()
$de = new-object directoryservices.directoryentry($myaccount.path)
$de.properties["Thumbnailphoto"].clear()
$de.properties["Thumbnailphoto"].add($imagedata) |out-null
$de.setinfo()
Write-Host "Photo has been uploaded"

2、vbscript脚本修改

我AD里面的用户名字是张三,那么照片也是张三。

AD里面用户的名称为张三,而AD属性里面对应名称字段的值为name,要以这个为准。因为我们一会脚本搜索的属性也是这个name属性。

照片就非常简单了,用户的名字为文件名。

Const ForReading = 1
?
'图片存的目录 
InDir = "C:\photo" 
Set fso = CreateObject("Scripting.FileSystemObject") 
set oIADS = GetObject("LDAP://RootDSE") 
strDefaultNC = oIADS.Get("defaultnamingcontext") 
Set theConn = CreateObject("ADODB.Connection") 
theConn.Provider = "ADsDSOObject" 
theConn.Open "ADs Provider" 
Set theCmd  = CreateObject("ADODB.Command") 
theCmd.ActiveConnection = theConn 
Set objRecordSet = CreateObject("ADODB.Recordset") 
For Each tFile In fso.GetFolder(InDir).Files 
    tName = tFile.Name 
    tName = Left(tName, InStrRev(tName,".")-1) 
      strQuery = "<LDAP://" & strDefaultNC & ">;" & "(&(objectClass=person)(name=" & tName & "));name,adspath;subtree" 
    theCmd.CommandText = strQuery 
    Set objRS = theCmd.Execute 
    If objRS.RecordCount = 0 Then 
      MsgBox "Can't find account for " & tName 
    Else 
      Set objUser = GetObject(objRS("adspath")) 
      ObjUser.Put "thumbnailPhoto", ReadByteArray(tFile.Path) 
      ObjUser.SetInfo 
    End If 
Next 
 
?
Function ReadByteArray(strFileName) 
    Const adTypeBinary = 1 
    Dim bin 
    Set bin = CreateObject("ADODB.Stream") 
    bin.Type = adTypeBinary 
    bin.Open 
    bin.LoadFromFile strFileName 
    ReadByteArray = bin.Read 
End Function

3、C#代码修改

DirectoryEntry container = new DirectoryEntry(LDAP_URI + USERS_DIR);
DirectoryEntry user = container.Children.Add("cn=" + username, "user");
?
// Set other property's of the user object:
//// user.Properties ["xxx"].Value = "yyy";
//// ...
?
byte [] buffer;
FileStream fileStream = new FileStream(@"c:\photo.jpg", FileMode.Open, FileAccess.Read);
?
try {
    int length = (int) fileStream.Length;  // get file length
    buffer = new byte [length];            // create buffer
    int count;                             // actual number of bytes read
    int sum = 0;                           // total number of bytes read
?
    // read until Read method returns 0 (end of the stream has been reached)
    while ((count = fileStream.Read(buffer, sum, length - sum)) > 0)
        sum += count;  // sum is a buffer offset for next reading
}
?
finally {
    fileStream.Close();
}
?
user.Properties ["thumbnailPhoto"].Value = buffer;
?
user.CommitChanges();
  评论这张
 
阅读(458)| 评论(0)
推荐

历史上的今天

评论

<#--最新日志,群博日志--> <#--推荐日志--> <#--引用记录--> <#--博主推荐--> <#--随机阅读--> <#--首页推荐--> <#--历史上的今天--> <#--被推荐日志--> <#--上一篇,下一篇--> <#-- 热度 --> <#-- 网易新闻广告 --> <#--右边模块结构--> <#--评论模块结构--> <#--引用模块结构--> <#--博主发起的投票-->
 
 
 
 
 
 
 
 
 
 
 
 
 
 

页脚

网易公司版权所有 ©1997-2017